Incident response against scammers

Not the first time helping friends respond to such situations. Email accounts getting taken over, fake distress call for monetary help broadcast to all contacts, emails and contacts getting wiped, email settings being configured to allow continued access to the victim’s emails/account, etc.

Also, not the first time seeing Nigerian IPs in the “culprit” list. Even if they’re zombies/proxies, seeing Nigerian IPs only does make it look pretty…unlikely 😉